WHAT IS CLAIMED: 

1 . A method for controlling access to a service comprising the steps of: 

(A) determining identity and key information of a delegatee; and 

(B) delegating permission to the delegatee over a personal area network, wherein said 
permission is represented using a digital signature and wherein said permission relates to the 
service; 

wherein steps (A) and (B) are performed by a delegator that verifies said identity 
and key information through physical presence of said delegatee. 

2. The method of claim 1 wherein said permission relating to said service comprises 
permission to access said service. 

3. The method of claim I wherein said permission relating to said service comprises 
permission to delegate one or more further permissions to one or more subsequent delegatees. 

4. The method of claim 3 further comprising the step of: 

(C) delegating to said one or more subsequent delegatees one or more of said further 
permissions via electronic mail. 

5. The method of claim 2 wherein said permission to access said service is limited in 
duration. 

6. The method of claim 3 wherein said pemiission to delegate is limited in duration. 

7. The method of claim 1 wherein steps (A) and (B) are performed by a delegator 
that verifies said identity and key information only through physical presence of said delegatee. 

8. The method of claim 1 wherein the service comprises accessing content. 

9. The method of claim 1 wherein the service comprises actuating a device. 

10. A method for controlling access to a service comprising the steps of: 
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(A) receiving from a delegatee key information over a computer 
network; 

(B) taking a hash of said key information; 

(C) verbally confirming said hash of said key information with said 
delegatee; 

(D) sending, by a delegator to the delegatee, permission to access said 
service, wherein said permission is represented using a digital signature; and 

(E) after step (D), providing said delegatee access to said service. 

1 1 . The method of claim 10 wherein the service comprises accessing content. 

12. The method of claim 10 wherein the service comprises actuating a device. 

13. A system for controlling access to a service comprising: 

a delegation device for determining identity and key information of a delegatee; and 
delegating permission over a personal area network to the delegatee relating to said service, 
wherein said permission is represented using a digital signature; and wherein the identity and key 
information is verified through physical presence of said delegatee. 

14. The system of claim 13 wherein said permission relating to said service comprises 
permission to access said service. 

15. The system of claim 13 wherein said permission relating to said service comprises 
permission to delegate one or more further permissions to one or more subsequent delegatees. 

16. The system of claim 15 wherein one or more of said fiirther permissions are 
delegated to said one or more subsequent delegatees via electronic mail. 

17. The system of claim 14 wherein said permission to access said service is limited 
in duration. 
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18. The system of claim 15 wherein said permission to delegate is Hmited in duration. 

19. The system of claim 13 the identity and key information is verified only through 
physical presence of said delegatee. 

20. The system of claim 13 wherein the service comprises accessing content. 

21. The system of claim 13 wherein the service comprises actuating a device. 
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